Security

LifeCurrent uses Supabase authentication and row-level security to isolate user data at the database layer.

Protected routes are enforced through Next.js middleware, and server route handlers verify active sessions before returning task or category data.

As the product matures, this page should be expanded with incident response contacts, vulnerability disclosure process, and security audit history.